Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3138312e302f32342d3234203d3e203532323333.roa
File:                     3139302e342e3138312e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          xxh7vd60W2WXreYVTLXgQemb/a4dpiJBIolG6vA9cns=
Subject key identifier:   DC:7B:64:55:E7:5B:CC:0A:DC:69:7F:51:C6:0E:84:B2:62:8D:45:2E
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       1A727D478A3FD9CBDBAB2665A7BE69434CDBD0E8
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3138312e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 04 Feb 2025 18:51:01 +0000
ROA not before:           Tue 04 Feb 2025 18:46:01 +0000
ROA not after:            Tue 03 Feb 2026 18:51:01 +0000
asID:                     52233
IP address blocks:        190.4.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:72:7d:47:8a:3f:d9:cb:db:ab:26:65:a7:be:69:43:4c:db:d0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Feb  4 18:46:01 2025 GMT
            Not After : Feb  3 18:51:01 2026 GMT
        Subject: CN=DC7B6455E75BCC0ADC697F51C60E84B2628D452E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:03:aa:38:3a:28:ae:d5:c8:57:7a:7b:af:
                    35:62:67:97:31:13:22:b7:95:ed:e3:c8:d0:50:d8:
                    f6:0c:7b:31:2f:c1:b2:03:e3:7e:50:8c:48:20:7d:
                    fd:06:1d:57:43:86:d5:15:21:e9:73:53:b8:b9:b0:
                    0f:10:a2:90:63:39:d7:db:b4:95:c1:7f:00:aa:f8:
                    76:0f:90:f8:0c:c0:a1:04:54:3d:3b:82:4b:76:ed:
                    f1:fe:95:aa:13:9a:4b:9b:14:79:d0:8a:08:f0:88:
                    fb:69:b9:0c:20:a7:2e:be:ae:2d:46:62:48:20:d7:
                    53:6f:2c:d4:1c:4f:8e:48:6c:37:b1:c9:c3:92:8f:
                    2b:f2:aa:a4:f7:d2:7a:42:f2:00:6a:6d:6b:ec:c7:
                    4b:44:38:55:e9:84:08:ed:70:89:eb:a5:da:e8:4d:
                    eb:05:53:cd:cc:3c:4d:64:89:07:14:54:9e:a2:2e:
                    e5:7a:aa:49:ba:89:d0:e3:ea:85:77:3c:7c:60:a5:
                    ef:41:23:67:21:bc:d8:37:3c:fc:17:09:8b:31:fd:
                    b2:fe:f8:c4:8d:ca:b6:e3:48:89:41:88:5f:38:76:
                    0d:1a:2d:b1:f5:c4:46:73:9c:d4:45:24:36:99:bd:
                    0c:fe:17:08:48:bb:66:a9:4f:b9:66:87:a4:96:ec:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7B:64:55:E7:5B:CC:0A:DC:69:7F:51:C6:0E:84:B2:62:8D:45:2E
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3138312e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:73:c4:13:17:ab:b0:18:4a:66:37:73:e5:1e:39:c5:c8:2a:
         56:44:3c:6e:c2:c1:72:f0:9d:55:98:4e:7d:fc:e8:c0:6e:79:
         66:97:ce:b5:1e:82:92:ed:25:63:83:f3:8e:ec:79:ad:b9:ae:
         11:95:11:29:77:30:ac:05:df:db:91:d5:43:bf:89:38:8f:18:
         d6:a7:9c:60:f8:2c:23:26:e8:5a:b5:31:c4:44:26:14:99:3c:
         c6:36:a5:a1:3d:09:97:73:47:17:65:c7:7f:eb:64:6d:a2:24:
         0c:41:3d:8d:e8:cc:e0:e7:96:5b:84:fb:53:92:ab:08:8c:20:
         a5:d5:c7:38:08:cd:eb:12:80:ea:13:08:ea:e1:24:40:a0:78:
         43:6b:10:d0:46:d7:72:78:ea:95:7d:46:eb:76:7f:5a:b9:1c:
         d6:38:cb:84:07:15:f4:c9:42:c3:b5:35:9e:a8:08:54:05:de:
         e6:34:54:fc:a4:03:0c:d2:2a:e1:e7:3c:2f:60:2f:58:ba:bb:
         8c:73:d0:2e:91:8a:3b:18:79:e0:0e:9d:05:bc:7b:fc:90:0f:
         db:e9:9f:18:f2:67:2e:db:af:c3:01:9f:0f:d2:0b:3f:09:c6:
         24:8f:a3:5c:86:74:ba:49:51:53:70:21:db:cf:e8:8a:75:b7:
         56:12:ea:bf
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUGnJ9R4o/2cvbqyZlp75pQ0zb0OgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3RDYzREFFNjFDMzIxMTkwOUM4OURFQkQ0NjNCMjZG
ODczRTQ0QjAeFw0yNTAyMDQxODQ2MDFaFw0yNjAyMDMxODUxMDFaMDMxMTAvBgNV
BAMTKERDN0I2NDU1RTc1QkNDMEFEQzY5N0Y1MUM2MEU4NEIyNjI4RDQ1MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6owOqODoortXIV3p7rzViZ5cx
EyK3le3jyNBQ2PYMezEvwbID435QjEggff0GHVdDhtUVIelzU7i5sA8QopBjOdfb
tJXBfwCq+HYPkPgMwKEEVD07gkt27fH+laoTmkubFHnQigjwiPtpuQwgpy6+ri1G
Ykgg11NvLNQcT45IbDexycOSjyvyqqT30npC8gBqbWvsx0tEOFXphAjtcInrpdro
TesFU83MPE1kiQcUVJ6iLuV6qkm6idDj6oV3PHxgpe9BI2chvNg3PPwXCYsx/bL+
+MSNyrbjSIlBiF84dg0aLbH1xEZznNRFJDaZvQz+FwhIu2apT7lmh6SW7IqFAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU3HtkVedbzArcaX9Rxg6EsmKNRS4wHwYDVR0j
BBgwFoAUI31j2uYcMhGQnInevUY7Jvhz5EswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZDRUNDM0Q1NzBEM0RGRTc4QTJFRUMxQ0FGNkYwN0U4
QUQxRkQzQTM1OUNENkZBODczNUMxQTg4MEEwNUU5LzAvMjM3RDYzREFFNjFDMzIx
MTkwOUM4OURFQkQ0NjNCMjZGODczRTQ0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzdENjNEQUU2MUMzMjExOTA5
Qzg5REVCRDQ2M0IyNkY4NzNFNDRCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQ0VDQzNENTcwRDNERkU3OEEyRUVDMUNBRjZGMDdFOEFEMUZEM0Ez
NTlDRDZGQTg3MzVDMUE4ODBBMDVFOS8wLzMxMzkzMDJlMzQyZTMxMzgzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+BLUwDQYJ
KoZIhvcNAQELBQADggEBADVzxBMXq7AYSmY3c+UeOcXIKlZEPG7CwXLwnVWYTn38
6MBueWaXzrUegpLtJWOD847sea25rhGVESl3MKwF39uR1UO/iTiPGNannGD4LCMm
6Fq1McREJhSZPMY2paE9CZdzRxdlx3/rZG2iJAxBPY3ozODnlluE+1OSqwiMIKXV
xzgIzesSgOoTCOrhJECgeENrENBG13J46pV9Rut2f1q5HNY4y4QHFfTJQsO1NZ6o
CFQF3uY0VPykAwzSKuHnPC9gL1i6u4xz0C6RijsYeeAOnQW8e/yQD9vpnxjyZy7b
r8MBnw/SCz8JxiSPo1yGdLpJUVNwIdvP6Ip1t1YS6r8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:58 2025 by rpki-client